CVE-2026-71392

A flaw was found in GNU Emacs, specifically in GNU Emacs for Android. An integer overflow can occur when a specially crafted font file is processed on 32-bit systems due to an unguarded addition during memory allocation. This can cause an undersized heap allocation and subsequently a heap-based...

CVE-2026-68148

A flaw was found in the Linux kernel's fscrypt component. A missing superblock check in the findorinsertdirectkey function could allow inodes from different filesystems to incorrectly share encryption keys. This can lead to a use-after-free vulnerability, potentially allowing an attacker to cause...

CVE-2026-73032 PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM...

CVE-2026-73032

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM...

CVE-2026-73032 PapersGPT for Zotero 0.6.1 RCE via Unsanitized LLM Response eval()

PapersGPT for Zotero 0.6.1 contains a remote code execution vulnerability that allows attackers to execute arbitrary JavaScript by returning malicious code from an LLM endpoint that is passed unsanitized to window.eval in views.ts. Attackers can exploit this through prompt injection in PDFs, MITM...

CVE-2026-73226

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and...

CVE-2026-73222

Claude Code Templates is a CLI tool for configuring and monitoring Claude Code. Prior to 1.29.4, the Claude Code Studio server launched by the --studio option in cli-tool/src/sandbox-server.js binds to all interfaces on port 3444, permits cross-origin requests, and requires no authentication. The...

EUVD-2026-56895

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-70339 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-70339

Access of resource using incompatible type 'type confusion' in Microsoft Edge Chromium-based allows an unauthorized attacker to execute code over a network...

CVE-2026-70339 Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

...

CVE-2026-70339

CVE-2026-70339 is a remote code execution vulnerability in Microsoft Edge (Chromium-based) caused by a type confusion in resource access. The NVD/NVD-derived descriptions state that an unauthorized attacker could execute code over a network. The provided metrics show a CVSS v3.1 base score of 5.4...

CVE-2026-18708

An issue in MongoDB Server's JavaScript scripting engine could allow an authenticated user with write privileges to cause code they control to be executed within the query scope of other users, through a specially crafted stored value processed during an internal maintenance cycle. This could...

CVE-2026-18706

An issue in MongoDB Server's $graphLookup aggregation stage could allow an authenticated user able to issue aggregation and memory-management commands to cause an internal reference to be used after the underlying memory has been freed. This could result in a server crash or, potentially, executi...

CVE-2026-73031

Telegram-search is affected by a stored XSS in MessageList.vue, where the highlightKeyword function passes raw message content to v-html without escaping. This allows an attacker to craft HTML-bearing messages in a shared Telegram group, enabling stored, cross-user JavaScript execution when users...

CVE-2026-65678

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:05+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:17:36+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:02:02+00:00| seen|...

CVE-2026-62724

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:02+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:19:39+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:59+00:00| seen|...

CVE-2026-62792

creationtimestamp| type| source ---|---|--- 2026-08-11 19:02:01+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:20:31+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:58+00:00| seen|...

CVE-2026-62799

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:59+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:22:23+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:56+00:00| seen|...

CVE-2026-62796

creationtimestamp| type| source ---|---|--- 2026-08-11 19:01:55+00:00| seen| https://www.thezdi.com/blog/2026/8/11/the-august-2026-security-update-review 2026-08-11 20:18:51+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2026-0284 2026-08-12 01:01:52+00:00| seen|...